CVE-2020-9482

If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication…

published April 28, 2020

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out to make API requests to NiFi Registry.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02672 · 85.6th percentile
Published
2020-04-28T18:12Z
EPSS history
Timeline
  • 28 APR 18:12Z
    If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication…
    cvelistv5